security Skills

/============================================================================/

/============================================================================/

/============================================================================/

Cipher suite configuration for WHMCS

mTLS implementation for WHMCS

Investigate a live, stalled or completed Anabasis run and turn findings into an evidence-bound fix proposal. Also answer...

Use for authorized wireless security assessment including Wi-Fi capture, WPA handshake analysis, rogue AP detection rese...

Use when an Obsidian wiki needs a reproducible health audit for structure, provenance, links, understanding, lifecycle,...

Windows App Workflow 阶段 6+ —— 安全加固。适用场景：功能冻结前后，需要对桌面应用做威胁建模（STRIDE）、安全代码审查、依赖审计与密钥管理检查。提炼自 AppSec Engineer 与 Secrets & C...

审查 AD、Kerberos、NTLM、证书服务与域内权限关系

Use for authorized Active Directory and Windows identity attacks including Kerberos, AD CS, BloodHound paths, NTLM relay...

Windows host and Active Directory security auditing.

Harden Windows servers per security baselines and CIS benchmarks. Configure Group Policy, Windows Defender, and security...

Comprehensive Windows workstation operations - diagnose slow boot, failing drives, BSOD crashes, startup bloat, runaway...

This skill should be used when the user asks to "escalate privileges on Windows," "find Windows privesc vectors," "enume...

Design modern native Windows 11 desktop applications using WinUI 3, XAML layouts, and Fluent Design controls.

Use when the target has a non-Wi-Fi radio attack surface — Bluetooth/BLE (GATT, pairing, KNOB/BIAS/BleedingTooth), Zigbe...

<!-- Copyright (c) 2026 defconxt. All rights reserved. -->

This skill should be used when the user asks to "analyze network traffic with Wireshark", "capture packets for troublesh...

Drafts a Written Information Security Program compliant with Massachusetts 201 CMR 17.00 and supplementary frameworks (G...

Review generated or changed WooCommerce extensions, payment and shipping integrations, checkout customizations, and orde...

Implement WooCommerce security — nonces, capabilities, input sanitization, output escaping, data validation, PCI complia...

Use when addressing every unresolved review thread on one exact existing GitHub PR. Verify each concern, make the smalle...

Public standalone read-only review of a supplied specification or candidate issue plan against bounded repository eviden...

Public standalone requirements exploration that turns a goal or existing specification into a focused, decision-complete...

Use when a reader needs an HTML visual explanation of a supplied document, proposal, selected code, or exact Git/GitHub...

Pick the right list from /opt/wordlists (symlinked SecLists plus rockyou) for fuzzing, spraying and subdomain work, and...

Expert knowledge in building custom WordPress themes, template hierarchy, hooks, filters, and WordPress.com compatibilit...

Use when the user asks 'is my site secure', 'run a security audit', 'check for vulnerabilities', 'was my site hacked', o...

Reviews and authors Cloudflare Workers code against production best practices. Load when writing new Workers, reviewing...

Cloudflare Workers best practices for production applications. Use when writing, reviewing, or configuring Workers.

Use to walk the user through a guided policy review of the project's crosslink configuration — tracking mode, security p...

[Workflow] Trigger Security Audit workflow — security review and vulnerability assessment.

Process for conducting system security reviews and remediating vulnerabilities. Follow the phases sequentially.

Run work as an explicit event-driven state machine executed by subagents. The orchestrator is the runtime from the canon...

Patterns for WorkOS SSO integration in Battery. Use this skill when implementing authentication, organization management...

Shared markdown task document for human↔agent collaboration. The agent creates a `.worksheets/ws-<epoch>-<slug>.md`, wri...

Use when asked to audit or fix Supabase queries to ensure every query filters by workspace_id and workspace access is va...

Use when work needs an isolated git worktree: new work, an existing ref, a gated feature workspace, a manifest-tracked l...

Build WordPress admin tables by extending `WP_List_Table`. Covers the required `require_once`, constructor `singular` /...

Build or audit interactive WordPress blocks with the Interactivity API: block.json interactivity support, viewScriptModu...

Scaffold and audit inbound custom WordPress REST API endpoints registered with register_rest_route on rest_api_init. Cov...

Scaffolds and reviews custom WordPress REST API endpoints registered via register_rest_route on rest_api_init — namespac...

Audits WordPress plugin or theme PHP code for the most common security mistakes — missing nonce checks, capability check...

Audits WordPress plugin or theme PHP code for the most common security mistakes — missing nonce checks, capability check...

Deep security audit for WordPress plugin/theme PHP code, covering issues beyond the basic sanitize/escape/nonce checklis...

Audits WordPress plugin/theme code for secret-handling and credential issues — hardcoded API keys, DB credentials, or si...

Extend or audit WordPress 7.1 entity list and form defaults through the View Config API used by DataViews-based screens....